framework-mcp 2.4.5 → 2.4.6

package/dist/interfaces/http/http-server.js

@@ -83,7 +83,7 @@ export class FrameworkHttpServer {
             res.json({
                 status: 'healthy',
                 uptime: Math.round(process.uptime()),
-                version: '2.4.5',
+                version: '2.4.6',
                 timestamp: new Date().toISOString()
             });
         });
@@ -183,7 +183,7 @@ export class FrameworkHttpServer {
         this.app.get('/api', (req, res) => {
             res.json({
                 name: 'Framework MCP HTTP API',
-                version: '2.4.5',
+                version: '2.4.6',
                 description: 'Pure Data Provider serving authentic CIS Controls Framework data',
                 endpoints: {
                     'GET /api/safeguards': 'List all available CIS safeguards',
@@ -222,7 +222,7 @@ export class FrameworkHttpServer {
     }
     start() {
         this.app.listen(this.port, '0.0.0.0', () => {
-            console.log(`🚀 Framework MCP HTTP Server v2.4.5 running on port ${this.port}`);
+            console.log(`🚀 Framework MCP HTTP Server v2.4.6 running on port ${this.port}`);
             console.log(`📊 Health check: http://localhost:${this.port}/health`);
             console.log(`📖 API docs: http://localhost:${this.port}/api`);
             console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);

package/dist/interfaces/mcp/mcp-server.js

@@ -7,7 +7,7 @@ export class FrameworkMcpServer {
     constructor() {
         this.server = new Server({
             name: 'framework-analyzer',
-            version: '2.4.5',
+            version: '2.4.6',
         });
         this.safeguardManager = new SafeguardManager();
         this.setupHandlers();
@@ -103,7 +103,7 @@ export class FrameworkMcpServer {
                         safeguards,
                         total: safeguards.length,
                         framework: 'CIS Controls v8.1',
-                        version: '2.4.5'
+                        version: '2.4.6'
                     }, null, 2),
                 },
             ],
@@ -122,7 +122,7 @@ export class FrameworkMcpServer {
     async run() {
         const transport = new StdioServerTransport();
         await this.server.connect(transport);
-        console.error('🤖 Framework MCP Server v2.4.5 running via stdio');
+        console.error('🤖 Framework MCP Server v2.4.6 running via stdio');
         console.error('📊 Pure Data Provider for CIS Controls v8.1');
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "framework-mcp",
-  "version": "2.4.5",
+  "version": "2.4.6",
   "description": "Pure Data Provider architecture serving authentic CIS Controls Framework data via MCP and HTTP API. Empowers LLMs with authoritative safeguards data for analysis. Supports Microsoft Copilot custom connectors and cloud deployments.",
   "main": "dist/interfaces/http/http-server.js",
   "type": "module",

package/src/core/safeguard-manager.ts

@@ -4363,10 +4363,7 @@ export class SafeguardManager {
       "Dormant Accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Disable",
-      "Delete",
-      "Period of 45 days of inactivity",
-      "Where Supported"
+      "Dormant Accounts"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
     ],
@@ -4766,30 +4763,22 @@ export class SafeguardManager {
     title: "Establish an Access Granting Process",
     description: "Establish and follow a documented process, preferably automated, for granting access to enterprise assets upon new hire or role change of a user.",
     implementationGroup: "IG1",
-    assetType: ["Users"],
+    assetType: ["Documentation"],
     securityFunction: ["Govern"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
-      "Follow",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Documentation"
+      "Follow"
     ],
     coreRequirements: [ // Green - The "what"
       "documented process",
       "granting access to enterprise assets"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "preferably automated",
       "upon new hire",
       "role change of a user",
-      "New Hire",
-      "Role Change",
       "Enterprise assets"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
     ],
     relatedSafeguards: ["5.1", "6.7", "6.8"],
     systemPromptFull: {
@@ -4877,25 +4866,17 @@ export class SafeguardManager {
     title: "Establish an Access Revoking Process",
     description: "Establish and follow a process, preferably automated, for revoking access to enterprise assets, through disabling accounts immediately upon termination, rights revocation, or role change of a user. Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails.",
     implementationGroup: "IG1",
-    assetType: ["Users"],
+    assetType: ["Documentation"],
     securityFunction: ["Govern"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
       "Follow",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Documentation"
+      "Disabling Accounts, instead of Deleting accounts, may be necessary to preserve audit trails"
     ],
     coreRequirements: [ // Green - The "what"
-      "process",
-      "revoking access to enterprise assets",
-      "disabling accounts immediately"
+      "Access Revoking Process"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "preferably automated",
-      "upon termination",
-      "rights revocation",
-      "role change of a user",
       "Role Change",
       "Termination",
       "Rights revocation",
@@ -4903,9 +4884,7 @@ export class SafeguardManager {
       "Disabling accounts immediately"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Disabling accounts, instead of deleting accounts, may be necessary to preserve audit trails",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
+      "Preferably Automated"
     ],
     relatedSafeguards: ["5.1", "6.7"],
     systemPromptFull: {
@@ -4997,24 +4976,18 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Enforce",
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
       "all externally-exposed enterprise or third-party applications to enforce MFA",
-      "where supported"
+      "MFA - Multi Factor Authentication"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "ALL Externally Exposed Applications",
-      "Enforce",
-      "Where supported"
+      "MFA for all externally exposed enterprise or third-party applications"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard",
-      "Directory service",
-      "SSO Provider",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Enforcing MFA through a directory service or SSO provider is a satisfactory implementation of this Safeguard"
     ],
     relatedSafeguards: ["2.1", "4.1"],
     systemPromptFull: {
@@ -5105,20 +5078,15 @@ export class SafeguardManager {
     assetType: ["Users"],
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
-      "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Require"
     ],
     coreRequirements: [ // Green - The "what"
-      "MFA",
-      "remote network access"
+      "MFA for remote network access"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "Remote Network Access"
+      "MFA for Remote Network Access"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
     ],
     relatedSafeguards: ["4.2", "12.7"],
     systemPromptFull: {
@@ -5210,25 +5178,17 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Require",
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
-      "MFA",
-      "all administrative access accounts",
-      "all enterprise assets"
+      "MFA on all administrative access accounts"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "where supported",
       "All Admin Access Accounts",
       "All enterprise assets",
-      "Onsite Management",
-      "Service Provider",
-      "Or"
+      "Onsite Management accounts or Service Provider Admin Accounts"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Multi-Factor Authentication Tool"
     ],
     relatedSafeguards: ["4.1"],
     systemPromptFull: {
@@ -5316,30 +5276,22 @@ export class SafeguardManager {
     title: "Establish and Maintain an Inventory of Authentication and Authorization Systems",
     description: "Establish and maintain an inventory of the enterprise's authentication and authorization systems, including those hosted on-site or at a remote service provider. Review and update the inventory, at a minimum, annually, or more frequently.",
     implementationGroup: "IG2",
-    assetType: ["software"],
+    assetType: ["Software"],
     securityFunction: ["Identify"],
     governanceElements: [ // Orange - MUST be met
       "Establish",
       "maintain",
-      "Review and update",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
+      "Review and update inventory",
+      "At a minimum, monthly or more frequenlty"
     ],
     coreRequirements: [ // Green - The "what"
       "inventory of the enterprise's authentication and authorization systems"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
-      "including those hosted on-site or at a remote service provider",
-      "at a minimum, annually, or more frequently",
-      "Hosted on-site",
-      "Remote Service Provider",
-      "Or",
-      "At a minimum Annually",
-      "More frequently"
+      "hosted on-site",
+      "hosted at a remote service provider"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process"
     ],
     relatedSafeguards: ["1.1", "2.1", "3.3", "5.6", "6.7"],
     systemPromptFull: {
@@ -5431,27 +5383,17 @@ export class SafeguardManager {
     securityFunction: ["Protect"],
     governanceElements: [ // Orange - MUST be met
       "Centralize",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access Management Tool"
+      "Where Supported"
     ],
     coreRequirements: [ // Green - The "what"
-      "access control",
-      "all enterprise assets"
+      "access control"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
       "through a directory service or SSO provider",
-      "where supported",
-      "Directory Service",
-      "SSO Provider",
-      "Or",
-      "All enterprise assets",
-      "Where Supported"
+      "Directory Service or SSO Provider",
+      "All enterprise assets"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access Management Tool"
     ],
     relatedSafeguards: ["4.1", "5.1", "5.6", "6.1", "6.2", "6.6", "12.5", "12.7"],
     systemPromptFull: {
@@ -5544,30 +5486,21 @@ export class SafeguardManager {
     governanceElements: [ // Orange - MUST be met
       "Define",
       "maintain",
-      "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule at a minimum annually, or more frequently",
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access management Tool"
+      "Necessary",
+      "Perform access control reviews of enterprise assets to validate that all privileges are authorized, on a recurring schedule",
+      "At a mimimum Annually, or more Frequently"
     ],
     coreRequirements: [ // Green - The "what"
-      "role-based access control",
-      "determining and documenting the access rights necessary for each role within the enterprise to successfully carry out its assigned duties"
+      "role-based access control"
     ],
     subTaxonomicalElements: [ // Yellow - Sub-taxonomical elements
       "Access rights",
       "Each Role",
-      "Necessary",
-      "Successfully carry out its assigned duties",
+      "Neccesary to Successfully carry out its assigned duties",
       "Determining",
-      "Documenting",
-      "At a minimum Annually",
-      "More frequently",
-      "Or"
+      "Documenting"
     ],
     implementationSuggestions: [ // Gray - Implementation suggestions
-      "Account and Access Control Management",
-      "Account and Credential Management Policy/Process",
-      "Identity and Access management Tool"
     ],
     relatedSafeguards: ["3.3", "4.1", "6.1"],
     systemPromptFull: {

package/src/interfaces/http/http-server.ts

@@ -106,7 +106,7 @@ export class FrameworkHttpServer {
       res.json({
         status: 'healthy',
         uptime: Math.round(process.uptime()),
-        version: '2.4.5',
+        version: '2.4.6',
         timestamp: new Date().toISOString()
       });
     });
@@ -222,7 +222,7 @@ export class FrameworkHttpServer {
     this.app.get('/api', (req, res) => {
       res.json({
         name: 'Framework MCP HTTP API',
-        version: '2.4.5',
+        version: '2.4.6',
         description: 'Pure Data Provider serving authentic CIS Controls Framework data',
         endpoints: {
           'GET /api/safeguards': 'List all available CIS safeguards',
@@ -273,7 +273,7 @@ export class FrameworkHttpServer {
 
   public start(): void {
     this.app.listen(this.port, '0.0.0.0', () => {
-      console.log(`🚀 Framework MCP HTTP Server v2.4.5 running on port ${this.port}`);
+      console.log(`🚀 Framework MCP HTTP Server v2.4.6 running on port ${this.port}`);
       console.log(`📊 Health check: http://localhost:${this.port}/health`);
       console.log(`📖 API docs: http://localhost:${this.port}/api`);
       console.log(`🔧 Environment: ${process.env.NODE_ENV || 'development'}`);

package/src/interfaces/mcp/mcp-server.ts

@@ -18,7 +18,7 @@ export class FrameworkMcpServer {
     this.server = new Server(
       {
         name: 'framework-analyzer',
-        version: '2.4.5',
+        version: '2.4.6',
       }
     );
 
@@ -129,7 +129,7 @@ export class FrameworkMcpServer {
             safeguards,
             total: safeguards.length,
             framework: 'CIS Controls v8.1',
-            version: '2.4.5'
+            version: '2.4.6'
           }, null, 2),
         },
       ],
@@ -153,7 +153,7 @@ export class FrameworkMcpServer {
     const transport = new StdioServerTransport();
     await this.server.connect(transport);
     
-    console.error('🤖 Framework MCP Server v2.4.5 running via stdio');
+    console.error('🤖 Framework MCP Server v2.4.6 running via stdio');
     console.error('📊 Pure Data Provider for CIS Controls v8.1');
   }
 }

package/swagger.json

@@ -299,7 +299,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.5"
+            "example": "2.4.6"
           },
           "timestamp": {
             "type": "string",
@@ -344,7 +344,7 @@
           },
           "version": {
             "type": "string",
-            "example": "2.4.5"
+            "example": "2.4.6"
           },
           "description": {
             "type": "string",